Privacy notice
Last updated: DRAFT — not yet reviewed
This notice explains, in plain English, what Gradora(“we”) does with the information you give us when you join the Gradora waitlist. Because Gradora is built for under-18s, we take extra care with young people's data — see our privacy notice for under-18s.
Who we are
The data controller is Gradora. [TODO: registered address + contact email to be confirmed.]
What we collect
Only what you choose to give us on the waitlist form: your email address, whether you are a parent or a student, and (optionally) your first name, exam level, exam board, and how you heard about us. We also record which page you signed up from and any campaign tags (UTM) in the link you arrived through. We do not collect anything else, and we ask for no special-category data.
Why we collect it, and our lawful basis
We use your email to confirm your place on the waitlist and to tell you about Gradora's launch and your free month of Pro. Our lawful basis is your consent, which you give by confirming your email (double opt-in). You can withdraw it at any time using the unsubscribe link in any email.
Who we share it with
We use a small number of trusted service providers (data processors) to run the waitlist: an email service provider to manage the list and send confirmation emails, our email host for internal notifications, and a privacy-friendly, cookieless analytics tool that does not identify you. [TODO: name final providers + confirm Data Processing Agreements (§13.3).] We never sell your data.
Where your data is held
We prefer UK/EU hosting for waitlist data, in line with UK GDPR. [TODO: confirm hosting region + transfers (§11.4).]
How long we keep it
We keep waitlist data until launch and for a limited period afterwards, then delete or convert it in line with your consent. [TODO: define exact retention period (§13.3).]
Your rights
Under UK GDPR you can ask us to: give you a copy of your data (access); correct anything that is wrong (rectification); delete your data (erasure); pause how we use it (restriction); receive it in a portable format (portability); object to a particular use; and withdraw consent at any time. Every email also includes a one-click unsubscribe.
Automated decisions
We do not make any decisions about you by automated means, and we do not profile you, as part of the waitlist. [TODO: confirm before launch if any automated processing is added.]
How to contact us, and how to complain
To make any of the requests above, contact us using the details in “Who we are”. If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this notice
We may update this notice as Gradora develops. If we make a significant change, we will tell waitlist members by email before it takes effect. This draft will be dated and version-controlled at launch. [TODO: add “last updated” date + version at launch.]